3com 4210 PWR 9-Port 3CR17341-91-ME ユーザーズマニュアル
製品コード
3CR17341-91-ME
258
C
HAPTER
21: AAA C
ONFIGURATION
Configuring the
Attributes of Data to be
Sent to RADIUS Servers
n
■
Generally, the access users are named in the userid@isp-name format. Here,
isp-name after the "@" character represents the ISP domain name, by which
the device determines which ISP domain a user belongs to. However, some old
isp-name after the "@" character represents the ISP domain name, by which
the device determines which ISP domain a user belongs to. However, some old
Create a RADIUS scheme and
enter its view
enter its view
radius scheme
radius-scheme-name
radius-scheme-name
Required
By default, a RADIUS scheme
named "system" has already
been created in the system.
named "system" has already
been created in the system.
Set the status of the primary
RADIUS
authentication/authorization
server
RADIUS
authentication/authorization
server
state primary
authentication { block |
active }
authentication { block |
active }
Optional
By default, the primary
RADIUS servers in the default
RADIUS scheme "system" are
in the active state, the
secondary servers in the
scheme are in the block state,
and all RADIUS servers in all
other RADIUS schemes are in
the block state.
RADIUS servers in the default
RADIUS scheme "system" are
in the active state, the
secondary servers in the
scheme are in the block state,
and all RADIUS servers in all
other RADIUS schemes are in
the block state.
Set the status of the primary
RADIUS accounting server
RADIUS accounting server
state primary accounting {
block | active }
block | active }
Set the status of the
secondary RADIUS
authentication/authorization
server
secondary RADIUS
authentication/authorization
server
state secondary
authentication { block |
active }
authentication { block |
active }
Set the status of the
secondary RADIUS accounting
server
secondary RADIUS accounting
server
state secondary accounting
{ block | active }
{ block | active }
Table 196 Set the status of RADIUS servers
Operation Command Remarks
Table 197 Configure the attributes of data to be sent to RADIUS servers
Operation
Command
Remarks
Enter system view
system-view
-
Create a RADIUS scheme and
enter its view
enter its view
radius scheme
radius-scheme-name
radius-scheme-name
Required
By default, a RADIUS scheme
named "system" has already
been created in the system.
named "system" has already
been created in the system.
Set the format of the user
names to be sent to RADIUS
server
names to be sent to RADIUS
server
user-name-format {
with-domain |
without-domain }
with-domain |
without-domain }
Optional
By default, the user names
sent from the switch to
RADIUS server carry ISP
domain names.
sent from the switch to
RADIUS server carry ISP
domain names.
Set the units of data flows to
RADIUS servers
RADIUS servers
data-flow-format data {
byte | giga-byte | kilo-byte |
mega-byte } packet {
giga-packet | kilo-packet |
mega- packet | one-packet }
byte | giga-byte | kilo-byte |
mega-byte } packet {
giga-packet | kilo-packet |
mega- packet | one-packet }
Optional
By default, in a RADIUS
scheme, the data unit and
packet unit for outgoing
RADIUS flows are byte and
one-packet respectively.
scheme, the data unit and
packet unit for outgoing
RADIUS flows are byte and
one-packet respectively.
Set the MAC address format
of the Calling-Station-Id (Type
31) field in RADIUS packets
of the Calling-Station-Id (Type
31) field in RADIUS packets
calling-station-id mode {
mode1 | mode2 } {
lowercase | uppercase }
mode1 | mode2 } {
lowercase | uppercase }
Optional
By default, the MAC address
format is XXXX-XXXX-XXXX,
in lowercase.
format is XXXX-XXXX-XXXX,
in lowercase.
Set the source IP address of
outgoing RADIUS messages
outgoing RADIUS messages
RADIUS scheme view
nas-ip ip-address
Optional
By default, no source IP
address is set; and the IP
address of the corresponding
outbound interface is used as
the source IP address.
address is set; and the IP
address of the corresponding
outbound interface is used as
the source IP address.
System view
radius nas-ip ip-address